The company is looking to mitigate insider risks by supporting, developing, and enhancing its insider threat program.
Requirements
- Understanding of information security concepts, best practices, and regulations related to insider threat
- Understanding of enterprise security and networking technology and how the technology relates to the prevention, detection, and response of insider threats
- Advanced understanding of the Microsoft ®Office suite (e.g., Outlook, Word, Excel, PowerPoint, etc)
- Knowledge of machine learning and its applications in information security
- Experience performing security event and incident detection and handling in a large corporate environment, gathering and analysis of threat intelligence, and computer network surveillance/monitoring
- Experience configuring and using user and/or entity behavior analytics (UBA/UEBA) products
- Experience with SQL and Python
Responsibilities
- Assess existing Insider Threat capabilities, identify gaps, and develop technical and non-technical indicators
- Assist in evaluating and implementing tools to mitigate insider threats
- Assist in collecting, analyzing, and interpreting data from multiple sources to improve the ability to prevent, detect, and respond to insider risks
- Discern patterns of complex threat actor behavior, communicate an understanding of current and developing Cyber threats to key stakeholders, and stay current with emerging trends and threats in the field of insider threat
- Collaborate with internal departments to ensure that tools developed for colleague use include adequate data streams to support fraud detection and reporting capabilities
- Interpret findings from fraud detection reports to identify and escalate potential incidents of internal fraud, theft, or misconduct
- Create and maintain insider fraud detection reports derived from various internal and external data sources
Other
- Engage with Business Units across the organization
- Produce metrics and documentation
- Implement tools and analytic methods to mitigate insider risks
- Partner with other groups within the organization to identify, implement, and document processes to mitigate insider risk
- Excellent verbal and written communication skills (including but not limited to: correct English usage, grammar, spelling, punctuation, vocabulary, etc.)
